@payez/next-mvp 4.0.0 → 4.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. package/dist/api-handlers/account/change-password.js +110 -110
  2. package/dist/api-handlers/admin/analytics.d.ts +19 -19
  3. package/dist/api-handlers/admin/analytics.js +378 -378
  4. package/dist/api-handlers/admin/audit.d.ts +19 -19
  5. package/dist/api-handlers/admin/audit.js +213 -213
  6. package/dist/api-handlers/admin/index.d.ts +21 -21
  7. package/dist/api-handlers/admin/index.js +42 -42
  8. package/dist/api-handlers/admin/redis-sessions.d.ts +35 -35
  9. package/dist/api-handlers/admin/redis-sessions.js +203 -203
  10. package/dist/api-handlers/admin/sessions.d.ts +20 -20
  11. package/dist/api-handlers/admin/sessions.js +283 -283
  12. package/dist/api-handlers/admin/site-logs.d.ts +45 -45
  13. package/dist/api-handlers/admin/site-logs.js +317 -317
  14. package/dist/api-handlers/admin/stats.d.ts +20 -20
  15. package/dist/api-handlers/admin/stats.js +239 -239
  16. package/dist/api-handlers/admin/users.d.ts +19 -19
  17. package/dist/api-handlers/admin/users.js +221 -221
  18. package/dist/api-handlers/admin/vibe-data.d.ts +79 -79
  19. package/dist/api-handlers/admin/vibe-data.js +267 -267
  20. package/dist/api-handlers/auth/refresh.js +633 -633
  21. package/dist/api-handlers/auth/signout.js +186 -186
  22. package/dist/api-handlers/auth/verify-code.d.ts +43 -43
  23. package/dist/api-handlers/auth/verify-code.js +90 -90
  24. package/dist/api-handlers/session/viability.js +114 -114
  25. package/dist/api-handlers/test/force-expire.js +59 -59
  26. package/dist/auth/auth-decision.js +182 -182
  27. package/dist/auth/utils/token-utils.d.ts +83 -83
  28. package/dist/auth/utils/token-utils.js +218 -218
  29. package/dist/client/AuthContext.js +115 -115
  30. package/dist/client/better-auth-client.d.ts +1020 -1020
  31. package/dist/components/SessionSync.js +121 -121
  32. package/dist/components/account/MobileNavDrawer.js +64 -64
  33. package/dist/components/account/UserAvatarMenu.js +91 -91
  34. package/dist/components/admin/VibeAdminLayout.js +71 -71
  35. package/dist/hooks/useAuthSettings.js +93 -93
  36. package/dist/hooks/useAvailableProviders.d.ts +43 -43
  37. package/dist/hooks/useAvailableProviders.js +112 -112
  38. package/dist/lib/app-slug.d.ts +95 -95
  39. package/dist/lib/app-slug.js +172 -172
  40. package/dist/lib/test-aware-get-token.js +86 -86
  41. package/dist/lib/token-lifecycle.d.ts +78 -78
  42. package/dist/lib/token-lifecycle.js +360 -360
  43. package/dist/pages/admin-login/page.js +73 -73
  44. package/dist/pages/client-admin/ClientSiteAdminPage.js +179 -179
  45. package/dist/pages/login/page.js +202 -202
  46. package/dist/pages/showcase/ShowcasePage.js +142 -142
  47. package/dist/pages/test-env/EmergencyLogoutPage.js +99 -99
  48. package/dist/pages/test-env/JwtInspectPage.js +116 -116
  49. package/dist/pages/test-env/TestEnvPage.js +51 -51
  50. package/dist/pages/verify-code/page.js +412 -412
  51. package/dist/routes/auth/logout.d.ts +31 -31
  52. package/dist/routes/auth/logout.js +98 -98
  53. package/dist/routes/auth/session.js +157 -157
  54. package/dist/routes/auth/viability.js +190 -190
  55. package/package.json +6 -16
  56. package/dist/auth/auth-options.d.ts +0 -57
  57. package/dist/auth/auth-options.js +0 -213
  58. package/dist/auth/callbacks/index.d.ts +0 -6
  59. package/dist/auth/callbacks/index.js +0 -12
  60. package/dist/auth/callbacks/jwt.d.ts +0 -45
  61. package/dist/auth/callbacks/jwt.js +0 -305
  62. package/dist/auth/callbacks/session.d.ts +0 -60
  63. package/dist/auth/callbacks/session.js +0 -170
  64. package/dist/auth/callbacks/signin.d.ts +0 -23
  65. package/dist/auth/callbacks/signin.js +0 -44
  66. package/dist/auth/events/index.d.ts +0 -4
  67. package/dist/auth/events/index.js +0 -8
  68. package/dist/auth/events/signout.d.ts +0 -17
  69. package/dist/auth/events/signout.js +0 -32
  70. package/dist/auth/providers/credentials.d.ts +0 -32
  71. package/dist/auth/providers/credentials.js +0 -223
  72. package/dist/auth/providers/index.d.ts +0 -5
  73. package/dist/auth/providers/index.js +0 -21
  74. package/dist/auth/providers/oauth.d.ts +0 -26
  75. package/dist/auth/providers/oauth.js +0 -105
  76. package/dist/lib/nextauth-secret.d.ts +0 -10
  77. package/dist/lib/nextauth-secret.js +0 -100
  78. package/dist/pages/profile/profile-patch.d.ts +0 -1
  79. package/dist/pages/profile/profile-patch.js +0 -281
  80. package/dist/pages/security/security-patch.d.ts +0 -1
  81. package/dist/pages/security/security-patch.js +0 -302
@@ -1,19 +1,19 @@
1
- /**
2
- * Admin Audit Logs API Handler
3
- *
4
- * Provides admin-level access to audit logs using service account credentials.
5
- *
6
- * @version 1.0
7
- * @requires Admin role (vibe_app_admin or payez_admin)
8
- */
9
- import { NextRequest, NextResponse } from 'next/server';
10
- export interface AdminAuditHandlerConfig {
11
- }
12
- /**
13
- * GET /api/admin/audit - List audit logs
14
- * POST /api/admin/audit - Stats
15
- */
16
- export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
17
- GET(request: NextRequest): Promise<NextResponse<unknown>>;
18
- POST(request: NextRequest): Promise<NextResponse<unknown>>;
19
- };
1
+ /**
2
+ * Admin Audit Logs API Handler
3
+ *
4
+ * Provides admin-level access to audit logs using service account credentials.
5
+ *
6
+ * @version 1.0
7
+ * @requires Admin role (vibe_app_admin or payez_admin)
8
+ */
9
+ import { NextRequest, NextResponse } from 'next/server';
10
+ export interface AdminAuditHandlerConfig {
11
+ }
12
+ /**
13
+ * GET /api/admin/audit - List audit logs
14
+ * POST /api/admin/audit - Stats
15
+ */
16
+ export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
17
+ GET(request: NextRequest): Promise<NextResponse<unknown>>;
18
+ POST(request: NextRequest): Promise<NextResponse<unknown>>;
19
+ };
@@ -1,213 +1,213 @@
1
- "use strict";
2
- /**
3
- * Admin Audit Logs API Handler
4
- *
5
- * Provides admin-level access to audit logs using service account credentials.
6
- *
7
- * @version 1.0
8
- * @requires Admin role (vibe_app_admin or payez_admin)
9
- */
10
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
- if (k2 === undefined) k2 = k;
12
- var desc = Object.getOwnPropertyDescriptor(m, k);
13
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
- desc = { enumerable: true, get: function() { return m[k]; } };
15
- }
16
- Object.defineProperty(o, k2, desc);
17
- }) : (function(o, m, k, k2) {
18
- if (k2 === undefined) k2 = k;
19
- o[k2] = m[k];
20
- }));
21
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
- Object.defineProperty(o, "default", { enumerable: true, value: v });
23
- }) : function(o, v) {
24
- o["default"] = v;
25
- });
26
- var __importStar = (this && this.__importStar) || (function () {
27
- var ownKeys = function(o) {
28
- ownKeys = Object.getOwnPropertyNames || function (o) {
29
- var ar = [];
30
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
- return ar;
32
- };
33
- return ownKeys(o);
34
- };
35
- return function (mod) {
36
- if (mod && mod.__esModule) return mod;
37
- var result = {};
38
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
- __setModuleDefault(result, mod);
40
- return result;
41
- };
42
- })();
43
- Object.defineProperty(exports, "__esModule", { value: true });
44
- exports.createAuditHandler = createAuditHandler;
45
- const server_1 = require("next/server");
46
- const auth_1 = require("../../server/auth");
47
- const startup_init_1 = require("../../lib/startup-init");
48
- const roles_1 = require("../../lib/roles");
49
- async function checkAdminRole(request) {
50
- const session = await (0, auth_1.getSession)(request);
51
- if (!session?.user) {
52
- return {
53
- isAdmin: false,
54
- error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
55
- };
56
- }
57
- const userRoles = session.user?.roles || [];
58
- const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
59
- if (!hasAdminRole) {
60
- return {
61
- isAdmin: false,
62
- error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
63
- };
64
- }
65
- return { isAdmin: true };
66
- }
67
- async function vibeServiceRequest(endpoint, options) {
68
- const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
69
- const clientId = process.env.VIBE_CLIENT_ID;
70
- const signingKey = process.env.VIBE_HMAC_KEY;
71
- if (!idpUrl || !clientId || !signingKey) {
72
- return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
73
- }
74
- const timestamp = Math.floor(Date.now() / 1000);
75
- const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
76
- const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
77
- const signature = crypto
78
- .createHmac('sha256', Buffer.from(signingKey, 'base64'))
79
- .update(stringToSign)
80
- .digest('base64');
81
- const proxyUrl = `${idpUrl}/api/vibe/proxy`;
82
- // Get the client slug from startup config for multi-client admin support
83
- const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
84
- const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
85
- try {
86
- const res = await fetch(proxyUrl, {
87
- method: 'POST',
88
- headers: {
89
- 'Content-Type': 'application/json',
90
- 'X-Vibe-Client-Id': clientId,
91
- 'X-Vibe-Timestamp': String(timestamp),
92
- 'X-Vibe-Signature': signature,
93
- ...(idpClientId && { 'X-Client-Id': idpClientId }),
94
- },
95
- body: JSON.stringify({
96
- endpoint,
97
- method: options.method,
98
- data: options.body ?? null,
99
- }),
100
- cache: 'no-store',
101
- });
102
- if (res.status === 204)
103
- return { ok: true, status: 204, data: null };
104
- if (!res.ok) {
105
- const errorText = await res.text();
106
- return { ok: false, status: res.status, data: null, error: errorText };
107
- }
108
- const body = await res.json();
109
- return { ok: true, status: res.status, data: body };
110
- }
111
- catch (error) {
112
- return { ok: false, status: 0, data: null, error: String(error) };
113
- }
114
- }
115
- /**
116
- * GET /api/admin/audit - List audit logs
117
- * POST /api/admin/audit - Stats
118
- */
119
- function createAuditHandler(config) {
120
- return {
121
- async GET(request) {
122
- const adminCheck = await checkAdminRole(request);
123
- if (adminCheck.error)
124
- return adminCheck.error;
125
- const { searchParams } = new URL(request.url);
126
- const action = searchParams.get('action');
127
- const userId = searchParams.get('userId');
128
- const startDate = searchParams.get('startDate');
129
- const endDate = searchParams.get('endDate');
130
- const page = parseInt(searchParams.get('page') || '1');
131
- const pageSize = parseInt(searchParams.get('pageSize') || '50');
132
- const queryBody = {
133
- page,
134
- pageSize,
135
- orderBy: 'created_at',
136
- orderDirection: 'desc',
137
- };
138
- const conditions = [];
139
- if (action) {
140
- conditions.push({ field: 'action', operator: 'eq', value: action });
141
- }
142
- if (userId) {
143
- conditions.push({ field: 'user_id', operator: 'eq', value: userId });
144
- }
145
- if (startDate) {
146
- conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
147
- }
148
- if (endDate) {
149
- conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
150
- }
151
- if (conditions.length === 1) {
152
- queryBody.filter = conditions[0];
153
- }
154
- else if (conditions.length > 1) {
155
- queryBody.filter = { operator: 'and', conditions };
156
- }
157
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
158
- if (!result.ok) {
159
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
160
- }
161
- const rawLogs = result.data?.data || result.data?.documents || [];
162
- const logs = rawLogs.map((log) => ({
163
- id: log.id || log.document_id,
164
- user_id: log.user_id || log.idp_user_id,
165
- email: log.email,
166
- action: log.action,
167
- resource_type: log.resource_type,
168
- resource_id: log.resource_id,
169
- details: log.details,
170
- ip_address: log.ip_address,
171
- user_agent: log.user_agent,
172
- created_at: log.created_at,
173
- }));
174
- return server_1.NextResponse.json({
175
- logs,
176
- meta: result.data?.meta || { total: logs.length, page, pageSize },
177
- });
178
- },
179
- async POST(request) {
180
- const adminCheck = await checkAdminRole(request);
181
- if (adminCheck.error)
182
- return adminCheck.error;
183
- const body = await request.json();
184
- const { action } = body;
185
- if (action === 'stats') {
186
- const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
187
- if (!result.ok) {
188
- return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
189
- }
190
- const logs = result.data?.data || result.data?.documents || [];
191
- const now = new Date();
192
- const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
193
- const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
194
- const stats = {
195
- total: logs.length,
196
- today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
197
- thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
198
- uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
199
- byAction: {},
200
- byResourceType: {},
201
- };
202
- logs.forEach((l) => {
203
- const act = l.action || 'unknown';
204
- stats.byAction[act] = (stats.byAction[act] || 0) + 1;
205
- const rt = l.resource_type || 'unknown';
206
- stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
207
- });
208
- return server_1.NextResponse.json({ stats });
209
- }
210
- return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
211
- },
212
- };
213
- }
1
+ "use strict";
2
+ /**
3
+ * Admin Audit Logs API Handler
4
+ *
5
+ * Provides admin-level access to audit logs using service account credentials.
6
+ *
7
+ * @version 1.0
8
+ * @requires Admin role (vibe_app_admin or payez_admin)
9
+ */
10
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
+ if (k2 === undefined) k2 = k;
12
+ var desc = Object.getOwnPropertyDescriptor(m, k);
13
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
+ desc = { enumerable: true, get: function() { return m[k]; } };
15
+ }
16
+ Object.defineProperty(o, k2, desc);
17
+ }) : (function(o, m, k, k2) {
18
+ if (k2 === undefined) k2 = k;
19
+ o[k2] = m[k];
20
+ }));
21
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
23
+ }) : function(o, v) {
24
+ o["default"] = v;
25
+ });
26
+ var __importStar = (this && this.__importStar) || (function () {
27
+ var ownKeys = function(o) {
28
+ ownKeys = Object.getOwnPropertyNames || function (o) {
29
+ var ar = [];
30
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
+ return ar;
32
+ };
33
+ return ownKeys(o);
34
+ };
35
+ return function (mod) {
36
+ if (mod && mod.__esModule) return mod;
37
+ var result = {};
38
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
+ __setModuleDefault(result, mod);
40
+ return result;
41
+ };
42
+ })();
43
+ Object.defineProperty(exports, "__esModule", { value: true });
44
+ exports.createAuditHandler = createAuditHandler;
45
+ const server_1 = require("next/server");
46
+ const auth_1 = require("../../server/auth");
47
+ const startup_init_1 = require("../../lib/startup-init");
48
+ const roles_1 = require("../../lib/roles");
49
+ async function checkAdminRole(request) {
50
+ const session = await (0, auth_1.getSession)(request);
51
+ if (!session?.user) {
52
+ return {
53
+ isAdmin: false,
54
+ error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
55
+ };
56
+ }
57
+ const userRoles = session.user?.roles || [];
58
+ const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
59
+ if (!hasAdminRole) {
60
+ return {
61
+ isAdmin: false,
62
+ error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
63
+ };
64
+ }
65
+ return { isAdmin: true };
66
+ }
67
+ async function vibeServiceRequest(endpoint, options) {
68
+ const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
69
+ const clientId = process.env.VIBE_CLIENT_ID;
70
+ const signingKey = process.env.VIBE_HMAC_KEY;
71
+ if (!idpUrl || !clientId || !signingKey) {
72
+ return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
73
+ }
74
+ const timestamp = Math.floor(Date.now() / 1000);
75
+ const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
76
+ const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
77
+ const signature = crypto
78
+ .createHmac('sha256', Buffer.from(signingKey, 'base64'))
79
+ .update(stringToSign)
80
+ .digest('base64');
81
+ const proxyUrl = `${idpUrl}/api/vibe/proxy`;
82
+ // Get the client slug from startup config for multi-client admin support
83
+ const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
84
+ const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
85
+ try {
86
+ const res = await fetch(proxyUrl, {
87
+ method: 'POST',
88
+ headers: {
89
+ 'Content-Type': 'application/json',
90
+ 'X-Vibe-Client-Id': clientId,
91
+ 'X-Vibe-Timestamp': String(timestamp),
92
+ 'X-Vibe-Signature': signature,
93
+ ...(idpClientId && { 'X-Client-Id': idpClientId }),
94
+ },
95
+ body: JSON.stringify({
96
+ endpoint,
97
+ method: options.method,
98
+ data: options.body ?? null,
99
+ }),
100
+ cache: 'no-store',
101
+ });
102
+ if (res.status === 204)
103
+ return { ok: true, status: 204, data: null };
104
+ if (!res.ok) {
105
+ const errorText = await res.text();
106
+ return { ok: false, status: res.status, data: null, error: errorText };
107
+ }
108
+ const body = await res.json();
109
+ return { ok: true, status: res.status, data: body };
110
+ }
111
+ catch (error) {
112
+ return { ok: false, status: 0, data: null, error: String(error) };
113
+ }
114
+ }
115
+ /**
116
+ * GET /api/admin/audit - List audit logs
117
+ * POST /api/admin/audit - Stats
118
+ */
119
+ function createAuditHandler(config) {
120
+ return {
121
+ async GET(request) {
122
+ const adminCheck = await checkAdminRole(request);
123
+ if (adminCheck.error)
124
+ return adminCheck.error;
125
+ const { searchParams } = new URL(request.url);
126
+ const action = searchParams.get('action');
127
+ const userId = searchParams.get('userId');
128
+ const startDate = searchParams.get('startDate');
129
+ const endDate = searchParams.get('endDate');
130
+ const page = parseInt(searchParams.get('page') || '1');
131
+ const pageSize = parseInt(searchParams.get('pageSize') || '50');
132
+ const queryBody = {
133
+ page,
134
+ pageSize,
135
+ orderBy: 'created_at',
136
+ orderDirection: 'desc',
137
+ };
138
+ const conditions = [];
139
+ if (action) {
140
+ conditions.push({ field: 'action', operator: 'eq', value: action });
141
+ }
142
+ if (userId) {
143
+ conditions.push({ field: 'user_id', operator: 'eq', value: userId });
144
+ }
145
+ if (startDate) {
146
+ conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
147
+ }
148
+ if (endDate) {
149
+ conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
150
+ }
151
+ if (conditions.length === 1) {
152
+ queryBody.filter = conditions[0];
153
+ }
154
+ else if (conditions.length > 1) {
155
+ queryBody.filter = { operator: 'and', conditions };
156
+ }
157
+ const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
158
+ if (!result.ok) {
159
+ return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
160
+ }
161
+ const rawLogs = result.data?.data || result.data?.documents || [];
162
+ const logs = rawLogs.map((log) => ({
163
+ id: log.id || log.document_id,
164
+ user_id: log.user_id || log.idp_user_id,
165
+ email: log.email,
166
+ action: log.action,
167
+ resource_type: log.resource_type,
168
+ resource_id: log.resource_id,
169
+ details: log.details,
170
+ ip_address: log.ip_address,
171
+ user_agent: log.user_agent,
172
+ created_at: log.created_at,
173
+ }));
174
+ return server_1.NextResponse.json({
175
+ logs,
176
+ meta: result.data?.meta || { total: logs.length, page, pageSize },
177
+ });
178
+ },
179
+ async POST(request) {
180
+ const adminCheck = await checkAdminRole(request);
181
+ if (adminCheck.error)
182
+ return adminCheck.error;
183
+ const body = await request.json();
184
+ const { action } = body;
185
+ if (action === 'stats') {
186
+ const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
187
+ if (!result.ok) {
188
+ return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
189
+ }
190
+ const logs = result.data?.data || result.data?.documents || [];
191
+ const now = new Date();
192
+ const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
193
+ const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
194
+ const stats = {
195
+ total: logs.length,
196
+ today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
197
+ thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
198
+ uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
199
+ byAction: {},
200
+ byResourceType: {},
201
+ };
202
+ logs.forEach((l) => {
203
+ const act = l.action || 'unknown';
204
+ stats.byAction[act] = (stats.byAction[act] || 0) + 1;
205
+ const rt = l.resource_type || 'unknown';
206
+ stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
207
+ });
208
+ return server_1.NextResponse.json({ stats });
209
+ }
210
+ return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
211
+ },
212
+ };
213
+ }
@@ -1,21 +1,21 @@
1
- /**
2
- * Admin API Handlers
3
- *
4
- * Provides admin-level API handlers for Vibe data access.
5
- * These handlers use service account credentials to bypass user filtering.
6
- *
7
- * Usage:
8
- * ------
9
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
10
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
11
- *
12
- * export const GET = createGetTableDataHandler({ ... });
13
- */
14
- export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
15
- export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
16
- export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
17
- export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
18
- export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
19
- export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
20
- export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
21
- export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
1
+ /**
2
+ * Admin API Handlers
3
+ *
4
+ * Provides admin-level API handlers for Vibe data access.
5
+ * These handlers use service account credentials to bypass user filtering.
6
+ *
7
+ * Usage:
8
+ * ------
9
+ * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
10
+ * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
11
+ *
12
+ * export const GET = createGetTableDataHandler({ ... });
13
+ */
14
+ export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
15
+ export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
16
+ export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
17
+ export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
18
+ export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
19
+ export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
20
+ export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
21
+ export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
@@ -1,42 +1,42 @@
1
- "use strict";
2
- /**
3
- * Admin API Handlers
4
- *
5
- * Provides admin-level API handlers for Vibe data access.
6
- * These handlers use service account credentials to bypass user filtering.
7
- *
8
- * Usage:
9
- * ------
10
- * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
11
- * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
12
- *
13
- * export const GET = createGetTableDataHandler({ ... });
14
- */
15
- Object.defineProperty(exports, "__esModule", { value: true });
16
- exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
17
- var vibe_data_1 = require("./vibe-data");
18
- Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
19
- Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
20
- Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
21
- Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
22
- Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
23
- Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
24
- Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
25
- var sessions_1 = require("./sessions");
26
- Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
27
- var users_1 = require("./users");
28
- Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
29
- var audit_1 = require("./audit");
30
- Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
31
- var analytics_1 = require("./analytics");
32
- Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
33
- var site_logs_1 = require("./site-logs");
34
- Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
35
- Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
36
- Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
37
- Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
38
- var redis_sessions_1 = require("./redis-sessions");
39
- Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
40
- Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
41
- var stats_1 = require("./stats");
42
- Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });
1
+ "use strict";
2
+ /**
3
+ * Admin API Handlers
4
+ *
5
+ * Provides admin-level API handlers for Vibe data access.
6
+ * These handlers use service account credentials to bypass user filtering.
7
+ *
8
+ * Usage:
9
+ * ------
10
+ * // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
11
+ * import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
12
+ *
13
+ * export const GET = createGetTableDataHandler({ ... });
14
+ */
15
+ Object.defineProperty(exports, "__esModule", { value: true });
16
+ exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
17
+ var vibe_data_1 = require("./vibe-data");
18
+ Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
19
+ Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
20
+ Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
21
+ Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
22
+ Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
23
+ Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
24
+ Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
25
+ var sessions_1 = require("./sessions");
26
+ Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
27
+ var users_1 = require("./users");
28
+ Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
29
+ var audit_1 = require("./audit");
30
+ Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
31
+ var analytics_1 = require("./analytics");
32
+ Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
33
+ var site_logs_1 = require("./site-logs");
34
+ Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
35
+ Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
36
+ Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
37
+ Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
38
+ var redis_sessions_1 = require("./redis-sessions");
39
+ Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
40
+ Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
41
+ var stats_1 = require("./stats");
42
+ Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });